L-EarningCharts

Privacy Policy

Last updated: [DATE]

L-EarningCharts ("we", "us", "our"), operated by [YOUR LEGAL NAME], [ADDRESS], respects

your privacy. This policy explains what we collect, why, and your rights. It is written to align

with the EU/UK GDPR and India's Digital Personal Data Protection Act, 2023 (DPDP).

1. What we collect

  • Account data: name, email, country, preferred currency, trading-experience level, and

optionally phone, age band and income band (used only for aggregated analytics).

  • Usage data: lessons viewed, patterns used, AI analyses, quiz scores, simulator activity,

page views, device/browser, and approximate location (from IP) for analytics.

  • Payment data: processed by our payment provider (Razorpay/Stripe/Merchant of Record). We

store invoice metadata (amount, currency, status) but never your full card details.

  • Uploaded images: chart screenshots you submit for analysis (stored securely; deletable).

2. Why we use it (lawful bases)

To provide the service (contract), improve it and prevent abuse (legitimate interest), process

payments (contract), send service emails (contract), and — only with consent — marketing.

3. Cookies & analytics/ads

We use essential cookies (login/session) and, with consent where required, analytics

(Google Analytics/PostHog) and Google AdSense advertising cookies. Free-tier users see ads;

Premium is ad-free. You can manage cookies in your browser and opt out of personalised ads via

Google's Ads Settings.

4. Sharing

We share data only with processors who help us run the service: hosting (Vercel), database

(Neon/Supabase), email (Resend), payments (Razorpay/Stripe/MoR), analytics (GA/PostHog), ads

(Google), and storage (Cloudflare R2). We do not sell your personal data.

5. Retention

We keep account data while your account is active and for a reasonable period afterwards for

legal/accounting needs (e.g., invoices kept per tax law). You can delete your account anytime.

6. Your rights

Access, correction, deletion, portability, objection, and withdrawal of consent. Use **Settings →

Export my data / Delete my account, or email [PRIVACY EMAIL]**. EU/UK users may complain to a

supervisory authority; Indian users may contact the Data Protection Board.

7. Security

Passwords are hashed (bcrypt); data is encrypted in transit. No method is 100% secure, but we

apply industry-standard safeguards and least-privilege access.

8. Children

Not directed to children under 18. We do not knowingly collect their data.

9. International transfers

Your data may be processed outside your country by our providers, with appropriate safeguards.

10. Changes & contact

We may update this policy and will post the new date here. Questions: [PRIVACY EMAIL].